Welcome to the v2.0.0-rc.r1 release of containerd! This is a pre-release of containerd

The first major release of containerd 2.x focuses on the continued stability of containerd's core feature set with an easy upgrade from containerd 1.x. This release includes the stabilization of new features added in the last 1.x release as well as the removal of features which were deprecated in 1.x. The goal is to support the vast community of containerd users well into the future along with their ever increasing deployment footprints and variety of use cases.

Highlights

• Enable Transfer service to use registry configuration directory (#9908)
• Configure otel from env instead of config.toml (#8970)
• Disable the support for Schema 1 images (#9765)
• Fix config import relative path glob (#9746)
• Enable NRI by default (#9744)
• Add PluginInfo to introspection API (#9442)
• Remove overlayfs volatile option on temp mounts (#9555)
• Move packages based on contributing guide (#9365)
• Update import and export to allow references to missing content (#9554)
• Add option to perform syncfs after pull (#9401)
• Expose usage of deprecated features (#9258)
• Use Intel ISA-L's igzip if available (#9200)
• Generalize plugin library (#9214)
• Introduce top level config migration (#9223)
• Add image delete target (#8989)
• Remove LimitNOFILE from containerd.service (#8924)
• Use github.com/containerd/log (#9086)
• Add image verifier transfer service plugin system based on a binary directory (#8493)
• Add support for image expiration during garbage collection (#9022)
• Reduce the contention between ref lock and boltdb lock in content store (#8792)
• Remove "containerd.io/restart.logpath" label (#8264)
• Remove aufs snapshotter (#8263)

Container Runtime Interface (CRI)

• Add support for multiple subscribers to CRI container events (#9661)
• Enable CDI by default (#9621)
• Remove non-sandboxed CRI implementation (#9228)
• Add support for userns in stateless and stateful pods with idmap mounts (KEP-127, k8s >= 1.27) (#8287)
• Use sandboxed CRI by default (#8994)
• Implement RuntimeConfig CRI call (#8722)
• Add support for user namespaces (KEP-127) (#8803)
• Remove CRI v1alpha2 (#8276)

Runtime

• Support vsock connection to task api (#9738)
• Update RuntimeDefault seccomp profile to disallow io_uring related syscalls (#9320)
• Switch runc shim to task service v3 and fix restore (#9233)
• Add sandboxer configuration and move sandbox controllers to plugins (#8268)
• Remove the CriuPath field from runc's options (#8279)
• Remove support for config.toml version = 1 (#8275)
• Remove io.containerd.runtime.v1.linux and io.containerd.runc.v1 (#8262)

Security Advisories

• [medium] RAPL accessible to a container GHSA-7ww5-4wqc-m92c

Breaking

• Disable the support for Schema 1 images (#9765)
• Update RuntimeDefault seccomp profile to disallow io_uring related syscalls (#9320)
• Move client to subpackage (#9316)
• Remove LimitNOFILE from containerd.service (#8924)
• Remove CRI v1alpha2 (#8276)
• Remove io.containerd.runtime.v1.linux and io.containerd.runc.v1 (#8262)
• Remove "containerd.io/restart.logpath" label (#8264)
• Remove aufs snapshotter (#8263)

Deprecations

• Postpone removal of deprecated CRI config properties (#9966)
• Deprecate go-plugin configuration option (#9238)
• CNI conf_template in CRI is no longer deprecated (#8637)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Akihiro Suda
• Wei Fu
• Phil Estes
• Maksym Pavlenko
• Sebastiaan van Stijn
• Samuel Karp
• Kazuyoshi Kato
• Rodrigo Campos
• Danny Canter
• Gabriel Adrian Samfira
• Iceber Gu
• Kirtana Ashok
• Abel Feng
• Austin Vazquez
• Krisztian Litkey
• Akhil Mohan
• Kohei Tokunaga
• Mike Brown
• Jin Dong
• Bjorn Neergaard
• rongfu.leng
• Justin Chadwell
• James Sturtevant
• Paul "TBBle" Hampson
• Davanum Srinivas
• Enrico Weigelt
• Brian Goff
• Paweł Gronowski
• Hsing-Yu (David) Chen
• Ilya Hanov
• Laura Brehm
• Marat Radchenko
• Cardy.Tang
• Henry Wang
• Aditi Sharma
• Bryant Biggs
• Evan Lezar
• Jordan Liggitt
• Kay Yan
• Markus Lehtonen
• Nashwan Azhari
• Shingo Omura
• Vinayak Goyal
• helen
• Alexandru Matei
• Amit Barve
• Charity Kathure
• Ed Bartosh
• Etienne Champetier
• James Jenkins
• Milas Bowman
• Shuaiyi Zhang
• yanggang
• Aditya Ramani
• Amir M. Ghazanfari
• Anthony Nandaa
• Artem Khramov
• Brad Davidson
• Chen Yiyang
• Christian Muehlhaeuser
• Cory Snider
• Djordje Lukic
• Edgar Lee
• Ethan Lowman
• Jiang Liu
• June Rhodes
• Mahamed Ali
• Maksim An
• Michael Crosby
• Peteris Rudzusiks
• Sam Edwards
• Samruddhi Khandale
• Steve Griffith
• Swagat Bora
• Tony Fang
• VERNOU Cédric
• hang.jiang
• jerryzhuang
• lengrongfu
• roman-kiselenko
• zhanluxianshen
• Aaron Lehmann
• Adrian Reber
• Alex Couture-Beil
• Alex Ellis
• Alex Rodriguez
• Angelos Kolaitis
• Antonio Huete Jimenez
• Arash Haghighat
• Avi Deitcher
• Ben Foster
• Bin Tang
• Bin Xin
• BinBin He
• Brennan Kinney
• ChengenH
• ChengyuZhu6
• Christian Stewart
• Craig Ingram
• Daisy Rong
• David Porter
• Derek Nola
• Eng Zer Jun
• Fahed Dorgaa
• Gary McDonald
• Iain Macdonald
• James Lakin
• Jan Dubois
• Jaroslav Jindrak
• Jiongchi Yu
• Julien Balestra
• Kern Walster
• Kevin Parsons
• Kirill A. Korinsky
• Konstantin Khlebnikov
• Pan Yibo
• Qasim Sarfraz
• Qiutong Song
• Robbie Buxton
• Robert-André Mauchin
• Shukui Yang
• Talon
• Tianon Gravi
• Tim Hockin
• Tobias Klauser
• Tõnis Tiigi
• Wang Xinwen
• William Chen
• Yibo Zhuang
• Yury Gargay
• Zechun Chen
• Zhang Tianyang
• Zoe
• baijia
• charles-chenzz
• chschumacher1994
• guangli.bao
• guangwu
• krglosse
• ningmingxiao
• pigletfly
• rokkiter
• wangxiang
• zhangpeng
• zhaojizhuang
• zounengren
• 吴小白
• 张钰
• 沈陵
• 谭九鼎

Dependency Changes

• dario.cat/mergo v1.0.0 new
• github.com/AdaLogics/go-fuzz-headers 1f10f66a31bf -> ced1acdcaa24
• github.com/AdamKorcz/go-118-fuzz-build 5330a85ea652 -> 8075edf89bb0
• github.com/Masterminds/semver/v3 v3.2.1 new
• github.com/Microsoft/go-winio v0.6.0 -> v0.6.2
• github.com/Microsoft/hcsshim v0.10.0-rc.7 -> v0.12.3
• github.com/cenkalti/backoff/v4 v4.2.0 -> v4.3.0
• github.com/checkpoint-restore/checkpointctl v1.1.0 new
• github.com/checkpoint-restore/go-criu/v7 v7.1.0 new
• github.com/cilium/ebpf v0.9.1 -> v0.11.0
• github.com/containerd/cgroups/v3 v3.0.1 -> v3.0.3
• github.com/containerd/console v1.0.3 -> v1.0.4
• github.com/containerd/continuity v0.3.0 -> v0.4.3
• github.com/containerd/errdefs v0.1.0 new
• github.com/containerd/go-runc v1.0.0 -> v1.1.0
• github.com/containerd/log v0.1.0 new
• github.com/containerd/nri v0.3.0 -> v0.6.1
• github.com/containerd/platforms v0.1.1 new
• github.com/containerd/plugin v0.1.0 new
• github.com/containerd/ttrpc v1.2.1 -> v1.2.3
• github.com/containerd/typeurl/v2 v2.1.0 -> v2.1.1
• github.com/containernetworking/cni v1.1.2 -> v1.2.0
• github.com/containernetworking/plugins v1.2.0 -> v1.4.1
• github.com/distribution/reference v0.6.0 new
• github.com/emicklei/go-restful/v3 v3.10.1 -> v3.11.0
• github.com/felixge/httpsnoop v1.0.4 new
• github.com/fsnotify/fsnotify v1.6.0 -> v1.7.0
• github.com/go-logr/logr v1.2.3 -> v1.4.1
• github.com/golang/protobuf v1.5.2 -> v1.5.4
• github.com/google/go-cmp v0.5.9 -> v0.6.0
• github.com/google/uuid v1.3.0 -> v1.6.0
• github.com/gorilla/websocket v1.5.0 new
• github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.0 new
• github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.0.0-rc.3 new
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.0 -> v2.19.0
• github.com/intel/goresctrl v0.3.0 -> v0.7.0
• github.com/klauspost/compress v1.16.0 -> v1.17.8
• github.com/klauspost/cpuid/v2 v2.0.4 -> v2.2.5
• github.com/mdlayher/socket v0.4.1 new
• github.com/mdlayher/vsock v1.2.1 new
• github.com/minio/sha256-simd v1.0.0 -> v1.0.1
• github.com/moby/sys/mountinfo v0.6.2 -> v0.7.1
• github.com/moby/sys/user v0.1.0 new
• github.com/mxk/go-flowrate cca7078d478f new
• github.com/opencontainers/image-spec 3a7f492d3f1b -> v1.1.0
• github.com/opencontainers/runtime-spec v1.1.0-rc.1 -> v1.2.0
• github.com/opencontainers/runtime-tools 946c877fa809 -> 2e043c6bd626
• github.com/pelletier/go-toml/v2 v2.2.1 new
• github.com/prometheus/client_golang v1.14.0 -> v1.19.0
• github.com/prometheus/client_model v0.3.0 -> v0.5.0
• github.com/prometheus/common v0.37.0 -> v0.48.0
• github.com/prometheus/procfs v0.8.0 -> v0.12.0
• github.com/sirupsen/logrus v1.9.0 -> v1.9.3
• github.com/stretchr/testify v1.8.2 -> v1.9.0
• github.com/urfave/cli/v2 v2.27.1 new
• github.com/vishvananda/netns 2eb08e3e575f -> v0.0.4
• github.com/xrash/smetrics 039620a65673 new
• go.etcd.io/bbolt v1.3.7 -> v1.3.9
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.40.0 -> v0.50.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.50.0 new
• go.opentelemetry.io/otel v1.14.0 -> v1.25.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.14.0 -> v1.25.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.14.0 -> v1.25.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.14.0 -> v1.25.0
• go.opentelemetry.io/otel/metric v0.37.0 -> v1.25.0
• go.opentelemetry.io/otel/sdk v1.14.0 -> v1.25.0
• go.opentelemetry.io/otel/trace v1.14.0 -> v1.25.0
• go.opentelemetry.io/proto/otlp v0.19.0 -> v1.1.0
• golang.org/x/exp aacd6d4b4611 new
• golang.org/x/mod v0.7.0 -> v0.17.0
• golang.org/x/net v0.7.0 -> v0.23.0
• golang.org/x/oauth2 v0.4.0 -> v0.17.0
• golang.org/x/sync v0.1.0 -> v0.7.0
• golang.org/x/sys v0.6.0 -> v0.19.0
• golang.org/x/term v0.5.0 -> v0.18.0
• golang.org/x/text v0.7.0 -> v0.14.0
• golang.org/x/time 90d013bbcef8 -> v0.3.0
• google.golang.org/appengine v1.6.7 -> v1.6.8
• google.golang.org/genproto/googleapis/api 6ceb2ff114de new
• google.golang.org/genproto/googleapis/rpc c3f982113cda new
• google.golang.org/grpc v1.53.0 -> v1.63.2
• google.golang.org/protobuf v1.28.1 -> v1.33.0
• k8s.io/api v0.26.2 -> v0.29.2
• k8s.io/apimachinery v0.26.2 -> v0.29.2
• k8s.io/apiserver v0.26.2 -> v0.29.2
• k8s.io/client-go v0.26.2 -> v0.29.2
• k8s.io/component-base v0.26.2 -> v0.29.2
• k8s.io/cri-api v0.26.2 -> v0.30.0-alpha.3
• k8s.io/klog/v2 v2.90.1 -> v2.120.1
• k8s.io/kubelet v0.29.2 new
• k8s.io/utils a5ecb0141aa5 -> 3b25d923346b
• sigs.k8s.io/json f223a00ba0e2 -> bc3834ca7abd
• sigs.k8s.io/structured-merge-diff/v4 v4.2.3 -> v4.4.1
• tags.cncf.io/container-device-interface v0.7.2 new
• tags.cncf.io/container-device-interface/specs-go v0.7.0 new

Previous release can be found at v1.7.0

Which file should I download?

• containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
• containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.

In addition to containerd, typically you will have to install runc and CNI plugins from their official sites too.

See also the Getting Started documentation.